What device management actually means
Device management (often called MDM, for Mobile Device Management) is software that lets you control, configure, and secure company devices from one location. It covers laptops, phones, and tablets. You can push software updates, enforce security policies, deploy apps, and remotely wipe a device if lost or stolen.
Without it, every device is managed individually. Someone on your team sets up each laptop by hand, installs the right apps, configures the settings, and hopes nothing goes wrong. That works fine for 5 people but stops working around 20.
Signs you need MDM
20+ devices
Manual setup at this scale causes discrepancies and gaps.
Sensitive data
Client data, financial records, and health information require remote wiping enabled on your devices.
Compliance requirements
ISO 27001, SOC 2, and Cyber Essentials all ask about endpoint security.
Regular onboarding
Zero-touch deployment ensures new hires are ready on day one.
Mixed fleet
Mac and Windows together require double the configuration work.
Signs you do not need it yet
There is no magic number. A 5-person team with encrypted Macs and up-to-date software is already doing the basics. Here is when to formalise it:
- You have fewer than 15 devices with no compliance requirements.
- Employee turnover is minimal, so manual setup is manageable.
- No client or auditor has asked about your device security posture.
In that case, a basic security checklist (full disk encryption, screen lock, up-to-date OS, antivirus) applied manually to each device is often sufficient. Revisit the decision when your team grows or a client asks about your endpoint controls.
Want to check your current device security?
Our free IT audit covers device management, encryption, and endpoint compliance.
Take the free audit →What zero-touch deployment means
Zero-touch deployment is the part of MDM companies find most useful. When you buy a new Mac through Apple Business Manager, you can configure it to automatically enrol in your MDM the first time it powers on. The device installs the right apps, applies the correct security settings, and is ready to use without IT involvement.
This means you can ship devices directly to remote employees. No IT setup visit. No, "here is a 20-step guide to configure your laptop." The employee turns it on, signs in, and everything is ready. Our device management case study covers how this works at scale.
MDM licensing
Most MDM platforms charge per device per month. Volobyte negotiates volume pricing and bundles MDM with your existing Microsoft or Apple agreements.
You get the same platform at a better price with expert configuration.
See our SaaS licensing service →MDM platforms compared
IRU (Kandji)
Mac-focused. Simple, modern UI. Strong zero-touch.
From £4/device/mo
Jamf Pro
Most established Mac MDM. Widest feature set.
From £6/device/mo
Intune
Best for Windows. Included with M365 Business Premium.
Included with M365 BP
BYOD: should you allow it?
Bring Your Own Device sounds appealing because it saves hardware costs. In practice, it creates problems. Personal devices mix personal and company data. You cannot enforce the same security policies on a device also used for personal browsing. If compromised, your company data is at risk.
If you must support BYOD, MDM can separate work data into a managed container on the personal device. But company-owned devices are always the cleaner, more secure option. The initial hardware cost is usually offset by lower support costs and fewer security incidents.
It is not just for big companies
MDM sounds like something for 500-person companies with a dedicated IT team. It is not. Every company with laptops faces device management problems. The difference is scale.
A well-configured setup requires little day-to-day management. The key is starting right and progressing as you grow.
Progressive device management roadmap
Security Checklist
Full disk encryption, screen lock, OS updates, and antivirus. Manual but effective for under 15 devices.
Under 15 devices
Apple Business Manager or Autopilot
Register devices centrally. No MDM yet, but you own the hardware identity. Foundation for everything else.
Any size
MDM Lite
Kandji or Intune basics: enforce encryption, push updates, deploy core apps. Fits 20 to 50 devices.
20-50 devices
Full Fleet Management
Zero-touch deployment, conditional access, compliance baselines, automated patching, remote wipe. For scaling past 50 devices or meeting compliance.
50+ devices
Volobyte guides you through each stage. Start with a checklist, graduate to MDM when it makes sense. No unnecessary spending.
Talk to us about where to start →Compliance is not just for companies that need it
Compliance frameworks describe what secure endpoints look like. Build towards them and you are secure by default, whether or not you pursue certification. You do not need to be audit-ready on day one. But if your device setup follows these principles from the start, you will not need to retrofit controls later.
Cyber Essentials 2026
From April 2026, Cyber Essentials v3.3 requires that critical and high-risk security updates be installed within 14 days of release. Miss that window and you auto-fail certification.
Without MDM, you cannot verify this across your fleet. MDM platforms provide real-time patch status, automated update enforcement, and compliance dashboards.
See how Volobyte manages device fleets →SOC 2 and HIPAA
SOC 2 and HIPAA both require endpoint security controls: encryption, patching, access controls, and asset inventory. MDM provides auditable evidence for all of these.
Even if you never pursue the audit, building towards these standards means your endpoint controls are defensible, documented, and ready for due diligence.
Talk to us about compliance readiness →That is the difference between building right and bolting on security after the fact. We provide controls and evidence to support audits and questionnaires. Certification decisions sit with your auditor.
Need help with MDM?
Book a free 20-minute call. We will scope your fleet, recommend the right platform, and give you a straight answer on cost.